This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/m_016GliLd1us5Dyp3gWd_9XmZU.roa File: m_016GliLd1us5Dyp3gWd_9XmZU.roa (raw, json) Hash identifier: NGfX/rkS6vQZZNfEtGY8uwL12Vk9X/AaXVk/NGit2hQ= Subject key identifier: 9B:FD:35:E8:69:62:2D:DD:6E:B3:90:F2:A7:78:16:77:FF:57:99:95 Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd Certificate serial: 019B7B36266DD8ABBC0FB542F6FA7F6282BA Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/m_016GliLd1us5Dyp3gWd_9XmZU.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203780 IP address blocks: 213.140.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:26:6d:d8:ab:bc:0f:b5:42:f6:fa:7f:62:82:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bfd35e869622ddd6eb390f2a7781677ff579995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5b:ec:f3:64:08:ac:e1:b1:85:22:70:69:d5: c8:7b:d8:50:2c:88:cd:bc:29:65:12:88:aa:54:b8: 4a:0f:de:04:33:a3:17:b5:da:c9:b8:1f:3f:74:56: 93:c2:54:1a:20:09:7b:7b:26:9e:a5:58:f1:07:59: 8b:66:01:af:11:37:04:25:07:4e:44:0c:15:f6:57: d3:83:bf:7e:42:96:b0:6f:25:ac:ab:84:f7:11:bc: 1f:74:63:0d:d8:16:46:93:95:62:66:21:95:0e:28: b3:ac:69:1f:89:28:e6:46:f5:ff:66:76:72:07:8d: f1:7f:f6:aa:d8:45:71:47:a5:5e:24:40:3c:55:bf: a3:a1:c2:cb:b3:c2:c7:88:a6:10:d5:2f:1f:ef:bf: 8e:a2:7b:2e:f4:ee:35:fd:75:8e:77:ab:14:0e:43: b3:f9:30:3d:a8:58:73:ac:56:d7:75:fa:5d:b3:27: 16:62:52:b0:b5:23:91:0f:6d:a5:ce:cc:43:57:30: 03:df:60:c9:f7:20:3d:a1:82:86:8e:ac:06:f6:95: 1e:e8:ab:20:6c:4d:0f:5c:72:83:0d:25:e2:2e:c2: a4:46:d8:46:3f:f7:ff:ee:72:4d:2c:76:8c:aa:46: 30:f9:6b:d9:36:5e:7f:f3:99:71:80:f6:59:64:75: ac:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FD:35:E8:69:62:2D:DD:6E:B3:90:F2:A7:78:16:77:FF:57:99:95 X509v3 Authority Key Identifier: keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/m_016GliLd1us5Dyp3gWd_9XmZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.140.144.0/24 Signature Algorithm: sha256WithRSAEncryption 30:ea:5d:b2:17:eb:62:a0:e8:ab:1a:86:46:87:e7:51:6a:16: f6:36:30:87:04:6f:5b:99:6d:79:8d:09:11:b7:91:e9:e1:43: 58:f6:69:90:4c:42:3f:58:32:f1:a8:63:e6:1c:cf:8f:54:24: 17:70:6f:e2:7d:84:11:87:73:a4:23:39:73:10:da:6a:d2:4e: 5b:d5:7d:f7:a4:2e:5d:01:b0:48:e5:22:ef:6e:1b:cf:f2:02: 77:db:a5:49:2d:6f:bf:a1:37:0b:a7:ee:99:bf:8a:41:3b:08: ba:0f:93:8a:19:da:3d:90:d7:46:98:73:65:ff:ca:6a:97:5a: 91:f4:03:95:ad:3c:81:d9:1d:8b:91:ca:f4:4b:8d:9d:02:0e: f8:4f:3b:14:6c:2a:f5:ca:ed:08:04:d1:92:18:a5:b1:3f:0c: 58:63:ce:0a:f2:32:fd:61:9d:cd:39:47:2d:94:ff:a2:fb:54: 65:f7:f4:99:46:38:f3:12:db:cf:d4:bb:00:59:30:85:30:5c: 4a:06:5c:3c:db:ff:58:a4:05:2c:57:a9:3c:90:5e:6e:51:af: d0:5f:39:d8:1a:bd:a2:bf:0f:30:2f:6f:a7:2c:42:07:88:2b: a5:fb:57:85:3c:47:f6:ed:61:5f:c8:2e:50:95:e3:b0:d6:e7: 1f:da:69:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NiZt2Ku8D7VC9vp/YoK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOGE5ZmQ3YzUxOTI2ZTIyZWE4YWEzM2IzYjg4MzhlOTNl OGJlZGQwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmZkMzVlODY5NjIyZGRkNmViMzkwZjJhNzc4MTY3N2ZmNTc5OTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01vs82QIrOGxhSJwadXIe9hQLIjN vCllEoiqVLhKD94EM6MXtdrJuB8/dFaTwlQaIAl7eyaepVjxB1mLZgGvETcEJQdO RAwV9lfTg79+QpawbyWsq4T3EbwfdGMN2BZGk5ViZiGVDiizrGkfiSjmRvX/ZnZy B43xf/aq2EVxR6VeJEA8Vb+jocLLs8LHiKYQ1S8f77+Oonsu9O41/XWOd6sUDkOz +TA9qFhzrFbXdfpdsycWYlKwtSORD22lzsxDVzAD32DJ9yA9oYKGjqwG9pUe6Ksg bE0PXHKDDSXiLsKkRthGP/f/7nJNLHaMqkYw+WvZNl5/85lxgPZZZHWs1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJv9NehpYi3dbrOQ8qd4Fnf/V5mVMB8GA1UdIwQY MBaAFF2Kn9fFGSbiLqiqM7O4g46T6L7dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iYjg2MWQtMzMwZi00YTk3LTlmOWMt NjZjNTNmMmIxZjAyLzEvbV8wMTZHbGlMZDF1czVEeXAzZ1dkXzlYbVpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9iYjg2MWQtMzMwZi00YTk3LTlmOWMtNjZjNTNmMmIxZjAy LzEvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YyQMA0G CSqGSIb3DQEBCwUAA4IBAQAw6l2yF+tioOirGoZGh+dRahb2NjCHBG9bmW15jQkR t5Hp4UNY9mmQTEI/WDLxqGPmHM+PVCQXcG/ifYQRh3OkIzlzENpq0k5b1X33pC5d AbBI5SLvbhvP8gJ326VJLW+/oTcLp+6Zv4pBOwi6D5OKGdo9kNdGmHNl/8pql1qR 9AOVrTyB2R2Lkcr0S42dAg74TzsUbCr1yu0IBNGSGKWxPwxYY84K8jL9YZ3NOUct lP+i+1Rl9/SZRjjzEtvP1LsAWTCFMFxKBlw82/9YpAUsV6k8kF5uUa/QXznYGr2i vw8wL2+nLEIHiCul+1eFPEf27WFfyC5QleOw1ucf2mkz -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:07 2026 by rpki-client